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P3P REF. FILE REQUEST FROM USER AGENT 
VIA INTERMEDIARY PROXY SERVER TO 
PROTECTION SERVER 



P3P REF. FILE RETURNED FROM PROTECTION 
SERVER TO USER AGENT 



P3P POLICY REQUEST FROM USER 
AGENT TO PROTECTION SERVER 



P3P POLICY, INDICATION OF PROTECTION SERVER 
AND CERTIFICATE RETURNEED TO USER AGENT 



USER DATA (IN HEADER) ENCRYPTED WITH CERTIFICATE 
SENT FROM USER AGENT TO PREOTEGTION SERVER 



STORING IN PROTECTION SERVER STORING MEANS ACC. 
TO POL1CY(ANONYMIZED, PSEUDONOMIZED) 



ANONYMIZED, PSEUDOMIZED HTTP 
REQUEST TO APPLICATION 
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SQL REQUEST(S) TO PROTECTION SERVER, 
RESPONSES ACC. TO POLICY 



RESPONSE WITH FILE FROM APPLICATION 
VIA PROTECTION SERVER TO USER AGENT 
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Fig. 7 



